[EDS] Software Developer (.NET/C#, Java) (1 year Contractor)

The Bosch Group is a leading global supplier of technology and services. Its operations are divided into four business sectors: Mobility, Industrial Technology, Consumer Goods, and Energy and Building Technology. With technology that is “Invented for life,” Bosch wants to help improve quality of life and conserve natural resources. 

The Bosch Group comprises Robert Bosch GmbH and its roughly 490 subsidiary and regional companies in over 60 countries. Including sales and service partners, Bosch’s global manufacturing, engineering, and sales network covers nearly every country in the world. Bosch’s innovative strength is key to the company’s further development. 

Bosch Global Software Technologies Company Limited (BGSV) is 100% owned subsidiary of Robert Bosch GmbH, offering end-to-end Engineering, IT, and Business Solutions.  

Starting its operation from 2010 at Etown 2 in HCMC, BGSV is the first software development center of Bosch in Southeast Asia. BGSV nowadays have over 4,000 associates, with a global footprint and presence in the US, Europe, and the Asia Pacific region. With our unique ability to offer end-to-end solutions that connect sensors, software, and services, we enable businesses to move from the traditional to digital or improve businesses by introducing a digital element in their products and processes. 

BGSV currently operates from three offices located at the following addresses: 

1. Etown Building – 364 Cong Hoa Street, Tan Binh Ward , Ho Chi Minh City, Vietnam 

2. OfficeHaus Building – 32 Tan Thang Street, Son Ky Ward, Tan Phu District, Ho Chi Minh City, Vietnam 

3. Capital Place Building – 29 Lieu Giai Street, Ngoc Khanh Ward, Ba Dinh District, Hanoi, Vietnam 

This position will be contracted through Bosch’s external vendor under a one-year agreement.

We are looking for a skilled Software Developer to contribute to the development of the CycurRISK tool – a client-server application designed for Threat Analysis and Risk Assessment (TARA) and Residual Risk Analysis (RRA) in compliance with ISO/SAE 21434.

The tool provides workflow-driven guidance, advanced attack modeling, and risk evaluation capabilities for automotive cybersecurity engineering.

Core Development

• Design and develop features for a client-server based application supporting:

• TARA (Threat Analysis and Risk Assessment)

• RRA (Residual Risk Analysis)

• Implement and enhance workflow-oriented user guidance for cybersecurity analysis processes

• Develop intuitive and scalable Windows-based UI for complex engineering workflows

Cybersecurity & Risk Modeling Features

• Implement functionalities for:

• Attack tree modeling and editing

• Automatic attack potential computation

• Likelihood estimation methods

• Enable comparison between initial and residual risks, including attack feasibility levels

• Support delta TARA (reuse TARA) for efficient reuse of existing analyses

• Develop and maintain logic for:

• Variant handling and configuration management

• Security controls activation/inactivation

• TOE (Target of Evaluation) configuration and assumptions

Reporting & Documentation

• Develop and maintain configurable PDF report generation

• Support review mode for audit and validation processes

• Ensure alignment with detailed methodology documentation

System Architecture & Integration

• Maintain and enhance client-server architecture (desktop + local server)

• Ensure seamless communication between frontend and backend components

• Support deployment and execution in local environments

CI/CD & Quality

• Build and maintain Jenkins pipelines for CI/CD

• Ensure compliance with:

• ISO/SAE 21434

• ISO 26262 tool qualification requirements (TCL-2/TCL-3)

• Perform code reviews, testing, and debugging to ensure high-quality delivery

Collaboration

• Work closely with Product Owner, Technical Lead, and global stakeholders

• Participate in methodology discussions related to cybersecurity and risk assessment

• Support onboarding and knowledge sharing within the team

•  

Technical Skills - MUST

• Strong experience in C# / .NET, JAVA

• Experience with Windows application development (WPF / WinForms)

• Good understanding of client-server architecture

• Experience with Jenkins CI/CD pipelines

• Familiar with data modeling, complex logic processing, and system design

Domain Knowledge (Highly Preferred)

• Understanding of:

• ISO/SAE 21434 (Cybersecurity)

• ISO 26262 (Functional Safety)

Soft Skills

• Strong analytical thinking (important for risk modeling)

• Ability to work with complex systems and abstract concepts

• Good English communication (global collaboration)

• Ownership mindset and proactive attitude

Further details regarding benefits will be shared during the interview process